{"id":"CVE-2022-26961","title":"Italtel NetMatch-S 5.0.0-20200703 allows Multiple Stored XSS under NP_IBCF-NATUP-01/NMSCI-WebGui/backup_restore.jsp and NP_IBCF-MIBER-03/NMSCI-WebGui/storage.jsp via the name parameter","summary":"Italtel NetMatch-S 5.0.0-20200703 allows Multiple Stored XSS under NP_IBCF-NATUP-01/NMSCI-WebGui/backup_restore.jsp and NP_IBCF-MIBER-03/NMSCI-WebGui/storage.jsp via the name parameter. A malicious user leveraging this vulnerability coul…","severity":"medium","cvss":5.4,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"published":"2026-09-04","updated":"2026-09-09","sourceUpdated":"2026-09-09T19:17:25.897","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-26961","references":[{"url":"https://www.gruppotim.it/it/footer/red-team/2022/CVE-2022-26961-Italtel-NETMATCH-S-CLOUD-INSIDE-VNF.html","label":"cve@mitre.org"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T19:00:37.846038Z"},"epss":0.0014,"epssPercentile":0.02771,"ingestedAt":"2026-09-08T20:10:03.168Z","slug":"CVE-2022-26961","body":"## Overview\n\nItaltel NetMatch-S 5.0.0-20200703 allows Multiple Stored XSS under NP_IBCF-NATUP-01/NMSCI-WebGui/backup_restore.jsp and NP_IBCF-MIBER-03/NMSCI-WebGui/storage.jsp via the name parameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The malicious payload will then be triggered every time an authenticated user browses the page containing it.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":29.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201415,"id":"CVE-2022-26961","ts":1789399422358,"field":"cvss","old":null,"new":"5.4"},{"seq":201414,"id":"CVE-2022-26961","ts":1789399422358,"field":"severity","old":"none","new":"medium"},{"seq":200150,"id":"CVE-2022-26961","ts":1789396867164,"field":"cvss","old":"5.4","new":null},{"seq":200149,"id":"CVE-2022-26961","ts":1789396867164,"field":"severity","old":"medium","new":"none"},{"seq":198074,"id":"CVE-2022-26961","ts":1789387918622,"field":"cvss","old":null,"new":"5.4"},{"seq":198073,"id":"CVE-2022-26961","ts":1789387918622,"field":"severity","old":"none","new":"medium"},{"seq":195871,"id":"CVE-2022-26961","ts":1789383263279,"field":"cvss","old":"5.4","new":null},{"seq":195870,"id":"CVE-2022-26961","ts":1789383263279,"field":"severity","old":"medium","new":"none"},{"seq":194799,"id":"CVE-2022-26961","ts":1789380252155,"field":"cvss","old":null,"new":"5.4"},{"seq":194798,"id":"CVE-2022-26961","ts":1789380252155,"field":"severity","old":"none","new":"medium"},{"seq":193587,"id":"CVE-2022-26961","ts":1789378131031,"field":"cvss","old":"5.4","new":null},{"seq":193586,"id":"CVE-2022-26961","ts":1789378131031,"field":"severity","old":"medium","new":"none"},{"seq":192373,"id":"CVE-2022-26961","ts":1789376171308,"field":"cvss","old":null,"new":"5.4"},{"seq":192372,"id":"CVE-2022-26961","ts":1789376171308,"field":"severity","old":"none","new":"medium"},{"seq":191161,"id":"CVE-2022-26961","ts":1789372993620,"field":"cvss","old":"5.4","new":null},{"seq":191160,"id":"CVE-2022-26961","ts":1789372993620,"field":"severity","old":"medium","new":"none"},{"seq":189945,"id":"CVE-2022-26961","ts":1789369077548,"field":"cvss","old":null,"new":"5.4"},{"seq":189944,"id":"CVE-2022-26961","ts":1789369077548,"field":"severity","old":"none","new":"medium"},{"seq":188733,"id":"CVE-2022-26961","ts":1789367955609,"field":"cvss","old":"5.4","new":null},{"seq":188732,"id":"CVE-2022-26961","ts":1789367955609,"field":"severity","old":"medium","new":"none"},{"seq":187515,"id":"CVE-2022-26961","ts":1789364921628,"field":"cvss","old":null,"new":"5.4"},{"seq":187514,"id":"CVE-2022-26961","ts":1789364921628,"field":"severity","old":"none","new":"medium"},{"seq":186303,"id":"CVE-2022-26961","ts":1789362885560,"field":"cvss","old":"5.4","new":null},{"seq":186302,"id":"CVE-2022-26961","ts":1789362885560,"field":"severity","old":"medium","new":"none"},{"seq":185089,"id":"CVE-2022-26961","ts":1789360906691,"field":"cvss","old":null,"new":"5.4"},{"seq":185088,"id":"CVE-2022-26961","ts":1789360906691,"field":"severity","old":"none","new":"medium"},{"seq":183876,"id":"CVE-2022-26961","ts":1789357808201,"field":"cvss","old":"5.4","new":null},{"seq":183875,"id":"CVE-2022-26961","ts":1789357808201,"field":"severity","old":"medium","new":"none"},{"seq":182128,"id":"CVE-2022-26961","ts":1789354045368,"field":"cvss","old":null,"new":"5.4"},{"seq":182127,"id":"CVE-2022-26961","ts":1789354045368,"field":"severity","old":"none","new":"medium"},{"seq":180921,"id":"CVE-2022-26961","ts":1789352848620,"field":"cvss","old":"5.4","new":null},{"seq":180920,"id":"CVE-2022-26961","ts":1789352848620,"field":"severity","old":"medium","new":"none"},{"seq":179714,"id":"CVE-2022-26961","ts":1789349920554,"field":"cvss","old":null,"new":"5.4"},{"seq":179713,"id":"CVE-2022-26961","ts":1789349920554,"field":"severity","old":"none","new":"medium"},{"seq":178507,"id":"CVE-2022-26961","ts":1789347682600,"field":"cvss","old":"5.4","new":null},{"seq":178506,"id":"CVE-2022-26961","ts":1789347682600,"field":"severity","old":"medium","new":"none"},{"seq":177300,"id":"CVE-2022-26961","ts":1789346111478,"field":"cvss","old":null,"new":"5.4"},{"seq":177299,"id":"CVE-2022-26961","ts":1789346111478,"field":"severity","old":"none","new":"medium"},{"seq":176093,"id":"CVE-2022-26961","ts":1789342627280,"field":"cvss","old":"5.4","new":null},{"seq":176092,"id":"CVE-2022-26961","ts":1789342627280,"field":"severity","old":"medium","new":"none"},{"seq":175879,"id":"CVE-2022-26961","ts":1789342219988,"field":"cvss","old":null,"new":"5.4"},{"seq":175878,"id":"CVE-2022-26961","ts":1789342219988,"field":"severity","old":"none","new":"medium"},{"seq":175417,"id":"CVE-2022-26961","ts":1789338255510,"field":"cvss","old":"5.4","new":null},{"seq":175416,"id":"CVE-2022-26961","ts":1789338255510,"field":"severity","old":"medium","new":"none"},{"seq":174212,"id":"CVE-2022-26961","ts":1789334545036,"field":"cvss","old":null,"new":"5.4"},{"seq":174211,"id":"CVE-2022-26961","ts":1789334545036,"field":"severity","old":"none","new":"medium"},{"seq":170635,"id":"CVE-2022-26961","ts":1789328253681,"field":"cvss","old":"5.4","new":null},{"seq":170634,"id":"CVE-2022-26961","ts":1789328253681,"field":"severity","old":"medium","new":"none"},{"seq":169430,"id":"CVE-2022-26961","ts":1789326831673,"field":"cvss","old":null,"new":"5.4"},{"seq":169429,"id":"CVE-2022-26961","ts":1789326831673,"field":"severity","old":"none","new":"medium"}]}